Vulnerability Details CVE-2022-23712
A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticated attacker could forcibly shut down an Elasticsearch node with a specifically formatted network request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.029
EPSS Ranking 86.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://discuss.elastic.co/t/elastic-stack-7-17-4-and-8-2-1-security-update/305530
- https://security.netapp.com/advisory/ntap-20220707-0010/
- https://www.elastic.co/community/security/
- https://discuss.elastic.co/t/elastic-stack-7-17-4-and-8-2-1-security-update/305530
- https://security.netapp.com/advisory/ntap-20220707-0010/
- https://www.elastic.co/community/security/
Products affected by CVE-2022-23712
-
cpe:2.3:a:elastic:elasticsearch:8.0.0
-
cpe:2.3:a:elastic:elasticsearch:8.0.1
-
cpe:2.3:a:elastic:elasticsearch:8.1.0
-
cpe:2.3:a:elastic:elasticsearch:8.1.1
-
cpe:2.3:a:elastic:elasticsearch:8.1.2
-
cpe:2.3:a:elastic:elasticsearch:8.1.3
-
cpe:2.3:a:elastic:elasticsearch:8.2.0